KMF Policy Management

KMF policy is stored in a database. This policy database is accessed internally
by all applications that use the KMF programming interfaces. The database can
constrain the use of the keys and certificates that are managed by
the KMF library. When an application attempts to verify a certificate, the application
checks the policy database. The kmfcfg command modifies the policy database.